Jaguar Land Rover Faces Severe Disruption from Cyber Attack

Jaguar Land Rover (JLR), the British luxury car manufacturer owned by Tata Motors, has reported significant disruptions to its production and retail operations due to a cyber attack that began on Sunday, September 1, 2025. The attack coincided with the release of new vehicle registration plates, a peak sales period for the automotive industry. JLR confirmed that it proactively shut down its systems to mitigate the impact, stating there is currently no evidence that customer data has been compromised.

Jaguar Land Rover Car Production and Sales Crippled by CyberattackJLR unable to register new cars due to cyber attackBBC NewsThe Telegraph - UKCyber attack cripples JLR production globallyJLR production and sales systems hit by cyber-attackJaguar Land Rover hit by major cyber attackJLR production and sales 'severely disrupted' by cyber attackJaguar Land Rover cyber attack: was customer data stolen?

The cyber incident has severely affected JLR's ability to register new vehicles, with dealerships unable to process sales on one of the busiest days of the year. Employees at the Halewood plant in Merseyside were instructed not to report to work, and production at the Solihull facility, where key models like the Range Rover and Discovery are manufactured, has also been halted. The company has not disclosed the specific nature of the attack or the timeline for restoring operations.

Cyber attack cripples JLR production globally

This incident is part of a troubling trend, as numerous UK businesses have faced similar cyber threats in recent months. High-profile attacks have targeted retailers such as Marks & Spencer and the Co-op Group, highlighting the increasing vulnerability of organizations to cybercrime. A report from the Royal Institution of Chartered Surveyors indicated that over one in four UK businesses experienced a cyber attack in the past year, underscoring the urgent need for improved cybersecurity measures.

Cybersecurity incident disrupts JLR retail and production

In a statement, JLR emphasized its commitment to restoring operations, saying, “We are now working at pace to restart our global applications in a controlled manner.” The company has not provided further details regarding the attack's origin or whether it involved ransomware, although cybersecurity experts suggest that the rapid shutdown of systems indicates a serious threat to operational integrity.

The Guardian

Critics have raised concerns about the preparedness of JLR and other companies in the face of rising cyber threats. Oakley Cox, a director at the cybersecurity firm Darktrace, noted, “The speed of their response is telling – you don’t typically halt production across multiple sites unless there’s genuine concern about operational impact.” This incident raises questions about the resilience of manufacturing firms against cyber attacks, particularly as they become increasingly reliant on interconnected IT systems.

The Guardian

As JLR works to restore its systems, the company faces ongoing challenges, including declining profits and the impact of US tariffs on its operations. The cyber attack adds another layer of complexity to JLR's recovery efforts, which have already been strained by delays in launching new electric models and recent job cuts. The company has not provided a timeline for when normal operations will resume, leaving customers and dealers uncertain about the future.

JLR production and sales systems hit by cyber-attack

• “We took immediate action to mitigate its impact by proactively shutting down our systems.” — Jaguar Land Rover

JLR retail network ‘severely disrupted’ after cyber attack

• “At this stage there is no evidence any customer data has been stolen but our retail and production activities have been severely disrupted.” — Jaguar Land Rover

The Guardian

• “The speed of their response is telling – you don’t typically halt production across multiple sites unless there’s genuine concern about operational impact.” — Oakley Cox, Director at Darktrace

The Guardian

This incident serves as a stark reminder of the vulnerabilities faced by modern businesses and the critical importance of robust cybersecurity measures in safeguarding operations.

Cybersecurity incident disrupts JLR retail and production